General
- Target 2026-06-27_ab30dd0262dd4b45b580507766c89c70_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 96KB
- Sample260629-em9ccscx6v
- SHA256 de6e5313da2484eb249079dc10ffaa661b22f5983ba762e5381a53110c699a10
- MD5 ab30dd0262dd4b45b580507766c89c70
- SHA1 fe90036b78ac6173448650c03061b6a6dc303fe6
- SHA512 f17a50eb41c67d054f2fa9b073f364b137eae4d928f8fb70ba04c5895bb048ce64036380c949848572974c2d0fba81e949d56ad0fc2f63b55fb74b15e6f2c800
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+4:7/db4Y4yxmCNu+r/tTujUAsOer7Lb
- TLSH T1DAA37C3575C182B2E33BCB7524F58296A73779352E16C60F62CD4B494D63A908E3AF0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-27_ab30dd0262dd4b45b580507766c89c70_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_ab30dd0262dd4b45b580507766c89c70_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 96KB
- SHA256 de6e5313da2484eb249079dc10ffaa661b22f5983ba762e5381a53110c699a10
- MD5 ab30dd0262dd4b45b580507766c89c70
- SHA1 fe90036b78ac6173448650c03061b6a6dc303fe6
- SHA512 f17a50eb41c67d054f2fa9b073f364b137eae4d928f8fb70ba04c5895bb048ce64036380c949848572974c2d0fba81e949d56ad0fc2f63b55fb74b15e6f2c800
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+4:7/db4Y4yxmCNu+r/tTujUAsOer7Lb
- TLSH T1DAA37C3575C182B2E33BCB7524F58296A73779352E16C60F62CD4B494D63A908E3AF0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE